Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $101B+

    Total Value Lost

  • 3299

    Incidents Tracked

  • 74

    Chains Affected

  • 80

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #8

    Thodex

    $2.00B

  4. #10

    Finiko

    $1.50B

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $8,051M
  • bitcoin $4,415M
  • bsc $2,657M
  • solana $1,605M
  • polygon $1,512M

Top Techniques by Losses

  • Other $61,553M
  • Rugpull $15,684M
  • Access Control $4,030M
  • Private Key Compromised (Brute Force) $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control $1,635M

Full Leaderboard

Showing 1551–1600 of 3299 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1551 GDAO $90K - Rugpull View →
1552 CryptoBatz $90K - Other View →
1553 Squid $90K - Other View →
1554 Berally $90K berachain Private Key Compromised (Unknown Method) / Access Control Access Control Attacks View →
1555 StepHeroNFTs $90K - Reentrancy Reentrancy View →
1556 Rodeo $90K arbitrum Mint Reserves Logic Exploit View →
1557 Cashera $90K - Rugpull View →
1558 Klein Bottle $90K - Rugpull
1559 Brahma Finance $90K - Other View →
1560 Builders NFT $89K - Rugpull View →
1561 Towelie $89K - Rugpull View →
1562 Ninja Gaiden $89K - Rugpull View →
1563 AI DAY: Part 2 $89K - Rugpull
1564 NFDAO $88K - Rugpull View →
1565 DerpMan $88K - Rugpull View →
1566 Tailverse $88K - Other View →
1567 China Rabbit $88K - Rugpull View →
1568 iSharesBitcoin $88K - Rugpull View →
1569 Expanso $88K - Rugpull View →
1570 BYToken $87K - Flash Loan Attack Flash Loans Attacks View →
1571 Move token $87K - Rugpull View →
1572 Bitcoinica $87K - Other View →
1573 BTC24H $86K polygon Acces Control Exploit / Access Control Access Control Attacks View →
1574 Novo $86K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1575 NFT Cloud $85K - Other View →
1576 MoneyMon $85K - Other View →
1577 Animoca Brands Metaverse $85K - Rugpull View →
1578 Galaxy Coin $85K - Rugpull View →
1579 HypurrFi $84K - Other View →
1580 Raptor2 $84K - Rugpull View →
1581 CBDAO $84K ethereum Rugpull View →
1582 AssetClub $84K - Rugpull View →
1583 2049 $82K - Rugpull View →
1584 TITANX $82K - Rugpull View →
1585 NeedForSpeed Finance $82K ethereum Rugpull View →
1586 ChainGPT $82K - Rugpull View →
1587 Finance $81K - Rugpull View →
1588 CoinPanda_ETH $81K - Rugpull View →
1589 MEMEPAD $80K - Rugpull View →
1590 OracleBNB $80K - Rugpull View →
1591 YAYO $80K - Rugpull View →
1592 Roe Finance $80K ethereum, polygon Flashloan Pool Shares Exploit / Oracle Issue Flash Loans Attacks View →
1593 Rubic $80K - Access Control Access Control Attacks View →
1594 BABYFIDO $79K - Rugpull View →
1595 DKP Token $79K - Other View →
1596 Memecoin $79K - Rugpull View →
1597 Cupid $79K - Flash Loan Attack Flash Loans Attacks
1598 Pirate x Pirate $78K - Access Control Access Control Attacks View →
1599 OracleSwapToken $77K ethereum Honeypot
1600 Zodiac Credit $77K - Rugpull View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$101B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.